Privacy Policy

Who we are

Shorts Studio AI is run by [operator's legal name], [address]. Questions about your data go to [contact email].

What we collect

• Your account: your email address, name and profile picture, and an identifier from Google or Apple when you sign in with them. If you sign in with a password we keep only a secure hash of it.
• What you put in: videos, links, music, images and fonts you add, the text you write (prompts, descriptions, themes), and what the tool makes from them: transcripts, analyses, edit plans and rendered Shorts.
• Connected accounts: if you connect YouTube, Google Drive, Facebook or Instagram, the access token (stored encrypted) and the channel, Page or account names needed to post where you ask.
• Notifications: the email address, Telegram chat or webhook you give us.
• Usage and billing: your plan, credit balance and history, what each job cost, and storage used. Payments are handled by Stripe, which holds your card details; we don't see or keep them.
• Technical data: server logs such as your IP address and browser type, used to run and protect the service.

Why we use it

• To make your Shorts and run the features you choose.
• To sign you in, keep your account secure and prevent abuse.
• To apply your plan, limits and free trial, and to take payments.
• To tell you about your account, such as a trial ending.

We don't sell your data, we don't show ads, and the app has no advertising or analytics trackers. We don't use your videos to train AI models of our own.

Where the law requires a legal basis, ours are: performing our contract with you, our legitimate interest in keeping the service secure, your consent where we ask for it, and legal obligations.

Who we share it with

Only the services needed to do what you ask, each receiving only what its job requires:

• Google Cloud and Firebase: hosting, file storage, the database and sign-in.
• Apple: sign-in, if you choose it.
• OpenAI and Anthropic: AI writing, planning, transcription and pictures. They receive text such as transcripts and prompts, and sometimes audio. Mostly the AI reads text, not your video frames.
• ElevenLabs: the script, when you make a voiceover.
• Pexels, Pixabay, Unsplash and Openverse: search words for stock footage, which the AI may base on what's said in your video.
• Stripe: payments.
• YouTube, Google Drive, Facebook and Instagram: the Shorts and text you choose to post, when you connect them.
• Email and Telegram providers: your notifications.

We may also disclose data if the law requires it, to protect people or the service, or as part of a sale or transfer of the business. These providers may process data outside your country; where the law requires it, we rely on safeguards such as standard contractual clauses.

Google and YouTube

Connecting YouTube means you also agree to the YouTube Terms of Service, and Google's Privacy Policy applies. We only use that access to upload what you send and to save files this app makes to your Drive. Our use of information from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can disconnect in Connected accounts, or revoke access in your Google security settings.

How long we keep it

• Free trial: it lasts 7 days, then you have 3 days to choose a plan. After that your projects and files are deleted.
• What stays after that: your email and basic account and usage records, so a trial can't be started again with the same address.
• Paid accounts: your content stays while your account is active, until you delete it or ask us to.
• Deleting your account: you can do it yourself in Settings. Your projects, files, connected accounts and sign-ins are deleted straight away and can't be recovered. Your email, sign-in identifiers and credit records stay, so a new free trial can't be started with the same address.
• Payment records: as long as tax and accounting law requires.

Cookies and local storage

We use one essential cookie to keep you signed in (it lasts up to 30 days). Your browser also stores small preferences, such as your light or dark theme and messages you closed. Signing in with Google or Apple uses Firebase, which stores sign-in data in your browser.

Your rights

Depending on where you live, you can ask to see, correct, export or delete your data, object to or limit how we use it, and withdraw consent. To ask, write to [contact email]. You can also complain to your local data protection authority.

Security

Connections are encrypted, connected-account tokens are encrypted when stored, and passwords are hashed. No service can promise perfect security, so tell us straight away if you think your account is at risk.

Children

The service isn't for children under 13, or under the minimum age for online services in your country. If you believe a child has given us data, contact us and we will delete it.

Changes

If we change this policy we'll update the date above, and tell you directly about important changes. See also our Terms of Service.